Brad Groux
00728911ed
feat: activate governed recurring automations
2026-08-30 06:39:48 -05:00
Brad Groux
62fcee5cdb
feat: govern active Run Access transitions ( #1279 )
...
* feat: govern active run access changes
* fix: classify Run Access CLI permissions
* test: cover Run Access CLI states
2026-08-30 05:43:44 -05:00
Brad Groux
269a41431d
test: cover provenance lookup failures
2026-08-30 05:09:51 -05:00
Brad Groux
092966359d
fix: close provenance release gates
2026-08-30 05:01:01 -05:00
Brad Groux
ae9c18a45b
Merge remote-tracking branch 'origin/main' into feat/run-file-provenance-1251
...
# Conflicts:
# cli/src/__tests__/agents-runtime-capabilities.test.ts
# cli/src/commands/agents.ts
# docs/CLI-GUIDE.md
# docs/testing/critical-path-coverage.json
# server/src/__tests__/routes/phase-transitions.test.ts
# server/src/routes/agents.ts
# web/src/__tests__/agent-run-timeline-mantine.test.tsx
# web/src/hooks/useAgent.ts
2026-08-30 04:49:42 -05:00
Brad Groux
61468620e7
feat: add deterministic automation drafts ( #1276 )
...
* feat: add deterministic automation drafts
* test: include automation draft input evidence
* test: cover automation draft persistence and API
* fix: harden automation draft persistence
2026-08-30 04:46:14 -05:00
Brad Groux
8dc7ecd66a
feat: add effective Run Access summary ( #1275 )
...
* feat: add effective run access summary
* docs: classify Run Access CLI permission
* test: cover Run Access CLI rendering
* test: cover Run Access failures
2026-08-30 04:45:54 -05:00
Brad Groux
907d46e394
feat: add causal run file provenance
2026-08-30 04:19:54 -05:00
Brad Groux
f3c26088ae
feat: add governed file-backed work products ( #1270 )
...
* feat: add governed file-backed work products
* test: cover file work product delivery paths
* test: cover work product artifact persistence
* fix: harden artifact file handling
* fix: harden work product artifact boundaries
* test: cover artifact source replacement
2026-08-30 03:59:19 -05:00
Brad Groux
e5aba49e61
chore: prepare Veritas Kanban 6.1.0 ( #1137 )
...
CI / Select Test Scope (push) Waiting to run
CI / Lint & Type Check (push) Waiting to run
CI / Changed Tests (push) Blocked by required conditions
CI / Workspace Unit Tests (push) Blocked by required conditions
CI / Build (push) Waiting to run
CI / Security Audit (push) Waiting to run
Desktop Artifacts / Unsigned macOS Artifact (push) Has been cancelled
Desktop Artifacts / Unsigned Linux Artifacts (push) Has been cancelled
Desktop Artifacts / Unsigned Windows Artifacts (push) Has been cancelled
* chore: prepare v6.1.0 release
* docs: record v6.1.0 release gate evidence
* test: cover CLI fork idempotency
* test: separate live MCP integration coverage
2026-07-26 06:22:01 -05:00
Brad Groux
a7bae41805
feat: add durable goal rollovers ( #1084 )
2026-07-25 21:28:25 -05:00
Brad Groux
4bf1b13299
feat: expose durable goal controls ( #1082 )
...
* feat: expose durable goal controls
* fix: map durable goal API permissions
2026-07-25 20:55:59 -05:00
Brad Groux
57dbd930bb
feat: pause runaway execution-tree fan-out ( #1075 )
...
* feat: add fan-out breaker controls
* feat: complete fan-out breaker operations
* fix: render admission control telemetry
* fix: bind queued workflow roots to compiled budgets
2026-07-25 19:47:11 -05:00
Brad Groux
8580e6202a
feat: add durable execution tree cancellation ( #1074 )
2026-07-25 19:11:32 -05:00
Brad Groux
49b03e373e
feat: unify all agent launch admission paths ( #1073 )
...
* feat: unify agent launch admission
* feat: add launch admission diagnostics
* test: align workflow recovery claim assertion
2026-07-25 19:04:29 -05:00
Brad Groux
f860184f62
feat: add admission queue inspection API ( #1071 )
2026-07-25 18:34:52 -05:00
Brad Groux
461c1fbbbf
feat: add aggregate execution tree budgets ( #1059 )
CI / Build (push) Waiting to run
CI / Select Test Scope (push) Waiting to run
CI / Lint & Type Check (push) Waiting to run
CI / Changed Tests (push) Blocked by required conditions
CI / Workspace Unit Tests (push) Blocked by required conditions
CI / Security Audit (push) Waiting to run
Desktop Artifacts / Unsigned macOS Artifact (push) Waiting to run
Desktop Artifacts / Unsigned Linux Artifacts (push) Waiting to run
Desktop Artifacts / Unsigned Windows Artifacts (push) Waiting to run
2026-07-25 06:32:18 -05:00
Brad Groux
085c492bba
feat: admit workflow execution capacity ( #1057 )
CI / Select Test Scope (push) Waiting to run
CI / Lint & Type Check (push) Waiting to run
CI / Changed Tests (push) Blocked by required conditions
CI / Workspace Unit Tests (push) Blocked by required conditions
CI / Build (push) Waiting to run
CI / Security Audit (push) Waiting to run
Desktop Artifacts / Unsigned macOS Artifact (push) Waiting to run
Desktop Artifacts / Unsigned Linux Artifacts (push) Waiting to run
Desktop Artifacts / Unsigned Windows Artifacts (push) Waiting to run
2026-07-25 05:52:59 -05:00
Brad Groux
5bb58b1bbc
feat: add durable task launch admission ( #1056 )
...
* feat: add durable task launch admission
* test: isolate provider admission fixtures
2026-07-25 05:18:08 -05:00
Brad Groux
c59a400406
feat: enforce active phase authority
2026-07-25 03:24:29 -05:00
Brad Groux
4f8e5dc14f
feat: propagate phase authority through launches ( #1043 )
...
* feat: propagate phase authority through launches
* test: update workflow executor test doubles
2026-07-25 02:50:14 -05:00
Brad Groux
1c5d44a2af
feat: add durable phase transition controls ( #1038 )
2026-07-25 01:36:06 -05:00
Brad Groux
4aba9229c9
feat: gate agent launches on workspace trust ( #1031 )
2026-07-25 00:48:28 -05:00
Brad Groux
f7aea9a4d4
feat: execute durable retry and fallback policy ( #1017 )
...
* feat: execute durable retry and fallback policy
* fix: declare recovery control permissions
* fix: make recovery fail closed and durable
* test: preserve workflow recovery revision
2026-07-24 20:37:08 -05:00
Brad Groux
37d256a3a6
feat: add harness compatibility matrix ( #976 )
2026-07-24 09:01:43 -05:00
Brad Groux
9a9db9b5b6
feat: add ACP server view ( #960 ) ( #967 )
2026-07-24 07:23:45 -05:00
Brad Groux
0fbd9ee428
feat: add run-scoped tool control plane ( #959 )
...
CI / Lint & Type Check (push) Waiting to run
CI / Changed Tests (push) Waiting to run
CI / Workspace Unit Tests (push) Waiting to run
CI / Build (push) Waiting to run
CI / Security Audit (push) Waiting to run
Desktop Artifacts / Unsigned macOS Artifact (push) Waiting to run
Desktop Artifacts / Unsigned Linux Artifacts (push) Waiting to run
Desktop Artifacts / Unsigned Windows Artifacts (push) Waiting to run
* feat: add run-scoped tool control plane (#857 )
* test: align provider capability fixtures
2026-07-24 05:10:20 -05:00
Brad Groux
6b9510c58f
feat: add provider-neutral conversation lifecycle ( #856 ) ( #958 )
2026-07-24 04:07:40 -05:00
Brad Groux
54417357f9
feat: add secure Buzz connection diagnostics ( #946 )
2026-07-23 22:07:25 -05:00
Brad Groux
9f51d78c50
feat: add immutable run launch manifests ( #926 )
...
Closes #854 .
2026-07-23 16:00:23 -05:00
Brad Groux
e6f21a849d
feat: add first-class harness support profiles ( #925 )
...
Closes #919 . Adds versioned support evidence, fail-closed dispatch, redacted diagnostics, and shared API, CLI, and Settings status.
2026-07-23 14:52:07 -05:00
Brad Groux
b704ab92d0
feat: add provider-neutral task envelope contracts ( #891 ) ( #894 )
...
CI / Lint & Type Check (push) Has been cancelled
CI / Workspace Unit Tests (push) Has been cancelled
CI / Build (push) Has been cancelled
CI / Security Audit (push) Has been cancelled
Co-authored-by: bradgroux <brad@digitalmeld.io>
2026-07-16 12:48:48 -05:00
Brad Groux
566ec0f7fe
feat: enforce provider runtime manifests ( #887 ) ( #890 )
...
Co-authored-by: bradgroux <brad@digitalmeld.io>
2026-07-16 11:00:44 -05:00
Brad Groux
44d1611741
feat: add governed SQLite journal maintenance ( #884 )
...
CI / Lint & Type Check (push) Waiting to run
CI / Workspace Unit Tests (push) Waiting to run
CI / Build (push) Waiting to run
CI / Security Audit (push) Waiting to run
* feat: add governed SQLite journal maintenance
* fix: update permission coverage for SQLite maintenance
---------
Co-authored-by: bradgroux <brad@digitalmeld.io>
2026-07-15 20:00:58 -05:00
Brad Groux
9abd06dd0e
Add policy-gated queue intake monitors
...
Add GitHub-backed queue monitor service, APIs, CLI commands, Settings queue dashboard, scheduler integration, operations digest activity, tests, and documentation.
2026-06-26 11:40:11 -05:00
Brad Groux
5b363303c4
Add unified recurring work scheduler
...
Add scheduler APIs, CLI commands, settings UI, retry/event state, telemetry hooks, and documentation over scheduled deliverables and workflow schedules.
2026-06-26 11:06:45 -05:00
Brad Groux
fbff5b5c40
Add workspace capability discovery and intake
...
Add config-backed workspace capability discovery, trusted intake APIs, CLI commands, settings UI, and delegated work status links.
2026-06-26 10:45:47 -05:00
Brad Groux
4a0c66d331
Add reusable agent profile packages ( #729 )
...
* Add reusable agent profile packages
* Add profile CLI permission coverage
2026-06-18 15:53:47 -05:00
dependabot[bot]
31359ebebf
build(deps): bump @eslint/js to 10.0.1
...
* build(deps-dev): bump @eslint/js from 9.38.0 to 10.0.1
Bumps [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js ) from 9.38.0 to 10.0.1.
- [Release notes](https://github.com/eslint/eslint/releases )
- [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js )
---
updated-dependencies:
- dependency-name: "@eslint/js"
dependency-version: 10.0.1
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
* Resolve eslint js 10 lint failures
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brad Groux <3053586+BradGroux@users.noreply.github.com>
2026-06-09 06:16:16 -05:00
Brad Groux
446def7e8d
Add configurable board columns
...
Adds configurable board columns and dynamic task statuses across the board, server validation, summaries, CLI, MCP, and docs.
Closes #640 .
2026-06-05 11:44:10 -05:00
Brad Groux
2cd7fe2ad2
Add prompt template import command
2026-06-04 01:01:14 -07:00
Brad Groux
eb7085a34a
Add redacted runtime snapshot command
2026-06-04 00:45:31 -07:00
Brad Groux
5c6ca0651d
Add vk doctor setup health command
2026-06-04 00:29:32 -07:00
Brad Groux
a42988a3e2
Ratcheting lint warning budget
2026-06-04 00:16:42 -07:00
Brad Groux
cb70bc42f9
fix: tighten agent approval RBAC guards
...
CI / Lint & Type Check (push) Waiting to run
CI / Workspace Unit Tests (push) Waiting to run
CI / Build (push) Waiting to run
CI / Security Audit (push) Waiting to run
## Summary
- splits agent register, permission, and routing route guards so read-like POSTs stay available without treating all agent self-service POSTs as read-only safe
- requires task:write for agent approval requests, telemetry:write for agent registration writes, and admin:manage for approval review/routing configuration/permission elevation
- mirrors the route guard changes in the shared CLI/MCP permission preflight map
- expands REST, CLI, and MCP authorization tests for read-only mutation denial and scoped agent approval requests
Closes #336 .
## Verification
- VERITAS_DISABLE_WATCHERS=1 node_modules/.bin/vitest run server/src/__tests__/routes/v1-permission-guards.test.ts cli/src/__tests__/api-permissions.test.ts mcp/src/__tests__/api-permissions.test.ts
- node scripts/check-permission-coverage.mjs
- pnpm --filter @veritas-kanban/shared build
- pnpm --filter @veritas-kanban/server typecheck
- pnpm --filter @veritas-kanban/cli typecheck
- pnpm --filter @veritas-kanban/mcp build
- pnpm build
- pnpm lint:budget
- pnpm audit --prod --audit-level=high
- node_modules/.bin/prettier --check server/src/routes/v1/permissions.ts server/src/routes/v1/index.ts shared/src/utils/api-permissions.ts server/src/__tests__/routes/v1-permission-guards.test.ts cli/src/__tests__/api-permissions.test.ts mcp/src/__tests__/api-permissions.test.ts docs/security.md
- git diff --check
## Notes
- pnpm audit --prod --audit-level=high passes the high-severity gate and still reports 3 moderate existing vulnerabilities.
- pnpm lint:budget passed with 705 warnings under the 714 warning budget.
- pnpm --filter @veritas-kanban/mcp typecheck is not available because the package has no typecheck script; pnpm --filter @veritas-kanban/mcp build covers TypeScript compilation.
2026-05-31 05:53:32 -05:00
Brad Groux
3f5c9a03af
feat: enforce CLI and MCP token permissions
...
## Summary
- adds a shared client-side API permission mapper and guarded API client for CLI and MCP calls
- exposes a non-secret /api/auth/context endpoint for scoped token preflight
- routes CLI and MCP task lookup helpers through the guarded client
- preflights direct summary text fetches that bypass the JSON API helper
- adds focused CLI and MCP token authorization coverage and documents the behavior
Refs #336 .
## Verification
- pnpm --filter @veritas-kanban/shared build
- pnpm --filter @veritas-kanban/cli typecheck
- pnpm --filter @veritas-kanban/mcp build
- pnpm --filter @veritas-kanban/server typecheck
- focused CLI and MCP api-permissions tests
- pnpm lint:budget
- pnpm audit --prod --audit-level=high
- pnpm build
- GitHub Actions: Build, Lint & Type Check, Security Audit, Workspace Unit Tests
2026-05-31 04:35:10 -05:00
Brad Groux
d3976f1d74
chore: harden audit findings and release QA
...
Add release validation and scheduled QA workflows.
Harden webhook URL handling, API helper edge cases, and runtime version reporting.
Split heavy web bundles, centralize view metadata, and stabilize full-suite tests.
2026-05-16 18:59:40 -05:00
Brad Groux
578269963a
Clarify setup paths and integration auth
...
Clarify setup paths, integration auth behavior, and communication docs.
2026-05-13 14:21:30 -05:00
Brad Groux
f7d2dcd099
fix: restore ci typecheck for cli
2026-05-04 01:53:21 -05:00
Brad Groux
ea9217c9fd
feat(cli+mcp): add sprint management commands and task --sprint flags ( #161 )
...
Add CLI sprint subcommands (list, create, update, delete, close, suggestions)
and MCP sprint tools for AI agent integration.
- New: cli/src/commands/sprints.ts - full sprint CRUD + archive workflow
- New: mcp/src/tools/sprints.ts - MCP tools for sprint management
- Add -S/--sprint flag to vk list, vk create, vk update
- Add sprint field to MCP list_tasks, create_task, update_task tools
- Wire sprint commands into CLI and MCP entry points
Based on sprint features from #80 by @mariozig, scoped to CLI/MCP surfaces only.
Co-authored-by: BradGroux <super.seth.vos@gmail.com>
2026-03-01 13:07:14 -06:00
